Content by Marianne Kolbasuk McGee

Congress Explores Healthcare CISOs' Roles

Marianne Kolbasuk McGee  •  May 25, 2016

At a May 25 Congressional hearing to gain input regarding a bill that would elevate the role of CISO at the Department of Health and Human Services, legislators learn that there is no one-size-fits-all pecking order for CISOs at healthcare organizations in the private sector.

Ransomware: Healthcare Fights Back

Marianne Kolbasuk McGee  •  May 24, 2016

A surge in ransomware attacks on hospitals is driving healthcare organizations large and small - as well as lawmakers and law enforcement agencies - to consider new and improved approaches to dealing with this evolving threat.

How to Protect Wearable Device Data

Marianne Kolbasuk McGee  •  May 23, 2016

The manufacturers of wearable health devices should incorporate key privacy and security best practices into the R&D of their products, says privacy advocate Michelle De Mooy of the Center for Democracy & Technology, who describes recommendations in a new study.

Why Should Government Monitor Mobile Security?

Marianne Kolbasuk McGee  •  May 19, 2016

In today's rapidly changing cyber threat environment, the federal government needs to take a lead role in making sure mobile device security is adequate, says security researcher Stephen Cobb, who analyzes ongoing investigations by the FTC and FCC in this audio interview.

SEC Chair: Cybersecurity Is No. 1 Risk

Marianne Kolbasuk McGee  •  May 18, 2016

Mary Jo White, chair of the U.S. Securities and Exchange Commission, says cybersecurity is the biggest risk facing the financial system. Financial institutions need to do more to build data security policies tailored to their risks, she stresses.

OCR's Deven McGraw on HIPAA Audit Preparation

Marianne Kolbasuk McGee  •  May 18, 2016

Organizations chosen for remote "desk audits" of their HIPAA compliance, which will begin this summer, need to be prepared to quickly provide supporting documentation, Deven McGraw, deputy director of health information privacy at the HHS Office for Civil Rights, explains this in-depth audio interview.

Engineer Charged With Stealing Medical Device Trade Secrets

Marianne Kolbasuk McGee  •  May 17, 2016

A criminal case against an engineer who allegedly stole trade secrets while he worked at two medical device companies highlights yet again the need to prioritize the protection of intellectual property. The indictment comes just weeks after Epic Systems was awarded $940 million in another trade secrets theft case.

Hacker Attacks in Healthcare: What's Changed in 2016 So Far?

Marianne Kolbasuk McGee  •  May 16, 2016

Hacker attacks in the healthcare sector so far this year generally have targeted smaller organizations and affected fewer individuals, in contrast with last year's massive hacker incidents. For example, one of the latest victims is a small physician group practice in Texas.

BA Security Is Probably a Lot Worse Than You Think

Marianne Kolbasuk McGee  •  May 13, 2016

The federal tally of major health data breaches is littered with hundreds of incidents blamed on business associates that affected a total of tens of millions of individuals. But vendor involvement in breaches is probably actually a lot worse than what's reflected on the HHS tally.

Loss of Records From Disposal Truck Triggers Legal Action

Marianne Kolbasuk McGee  •  May 10, 2016

Like class action lawsuits stemming from breaches of electronic health data, a new lawsuit filed in the aftermath of the loss of paper records faces slim chances of success, legal experts say. But will regulators take action in the case?

FTC, FCC Launch Mobile Security Inquiries

Marianne Kolbasuk McGee  •  May 9, 2016

The FTC and FCC have launched security investigations of mobile device makers and wireless carriers, citing growing concerns over vulnerabilities that threaten "the security and integrity" of these products and services. The regulators are examining how security patches are distributed.

Internet of Things: Would New Regulations Help or Hurt?

Marianne Kolbasuk McGee  •  May 6, 2016

Establishing new laws and regulations to address privacy and cybersecurity concerns related to the Internet of Things would likely be ineffective, attorney Steven Teppler, who co-chairs an American Bar Association IoT committee, says in an audio interview.

OCR: Pay More Attention to Business Associate Risks

Marianne Kolbasuk McGee  •  May 5, 2016

Federal regulators are reminding healthcare organizations about the urgency of having plans in place to manage security issues, including data breaches, involving their business associates. The guidance is important, security experts say, because about one-fifth of major health data breaches have involved BAs.

Proposed Legislation Aims to Elevate HHS CISO Role

Marianne Kolbasuk McGee  •  May 3, 2016

A bipartisan bill proposing to elevate the position of CISO within the Department of Health and Human Services seeks to emulate moves that some larger private sector organizations - mostly outside of healthcare - have made in recent years.

Joint Commission OKs Secure Texting for Patient Care Orders

Marianne Kolbasuk McGee  •  May 2, 2016

The Joint Commission, which accredits healthcare organizations, has reversed its long ban on physicians and other clinicians using text messaging to place orders related to patient care, citing technology advances that enable more secure communication. But users must comply with a list of requirements.